149.56.99.200

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
58 reports
46 reporters · latest 1 day ago
ISP
OVH Hosting, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16276
Hostname(s)
vps-6060320e.vps.ovh.ca
Domain Name
ovh.net
Country
🇨🇦 Canada
City
Beauharnois, Quebec
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
58 from 46 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 16 🇫🇷 France 13 🇺🇸 United States of America 6
Most common categories Web App Attack 29 Port Scan 25 Hacking 15 Bad Web Bot 14 Brute-Force 6
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇱 DanielSparta
Web App Attack Bad Web Bot
🇫🇮 iamxorum
Port Scan
🇸🇪 eagle
149.56.99.200 - - [11/Nov/2026:08:54:55 +0000] "POST / HTTP/1.1" 404 553 "-" "Mozilla/5.0" "[server]" ...
Bad Web Bot Web App Attack
🇩🇪 cloudmax
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 26 request event(s), 26 distinct path(s), 25 request(s) to suspicious path(s). Examples: /.env, /.env.backup, /.env.bak, /.env.dev, /.env.local.
Hacking Bad Web Bot Web App Attack
🇩🇪 Mr-Money
scenario: crowdsecurity/http-sensitive-files - events: 5
Web App Attack Hacking
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 29 application-level events across 3 target ports and 2 source port(s). Ports: 443/HTTPS, 6379/Redis, 3306/MySQL. Sensors: H0neytr4p, Redishoneypot, Dionaea.
Port Scan
🇮🇱 DanielSparta
Web App Attack Bad Web Bot
Anonymous
Port Scan Brute-Force
🇮🇪 AutosOnShow
blocked for webapp attack | path requested: / | seen at 2026-11-11 02:25:31.368 |
Web App Attack
🇭🇰 CyberFox
8000/tcp (1 or more attempts)
Port Scan
🇨🇦 Tanados
Blocked by UFW [4000/tcp] Source port: 43955 TTL: 247 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 Viveronese
HTTP vulnerability scanning
Web App Attack
🇦🇺 AWW-Admin
(mod_security) mod_security triggered on hostname [redacted] 149.56.99.200 (CA/Canada/vps-6060320e.vps.ovh.ca)
SQL Injection
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 42.180.130.143
🇬🇧 35.203.211.72
🇦🇷 200.110.218.12
🇨🇴 181.63.82.58
🇵🇱 172.64.198.4
🇺🇸 172.58.164.77
🇺🇸 162.216.150.87
🇺🇸 162.216.149.246
🇸🇬 159.223.60.98
🇺🇸 159.65.79.198
🇿🇦 154.65.125.85
🇩🇪 152.53.246.170
🇺🇸 137.184.40.59
🇺🇸 136.71.99.220
🇨🇳 112.123.17.13
🇨🇳 112.123.2.70
feedback